Privacy policy

BullardTri Coaching is a training platform for athletes coached through BullardTri. This page explains what information it holds, why, who can see it and how to have it removed. Questions: blake@bullardtri.com.

What we collect

• Account details: your name, email address and a password (stored only as a secure hash by our authentication provider).
• Training profile: thresholds you or your coach enter, such as FTP, threshold heart rate and threshold pace.
• Training data: planned workouts, what you completed (duration, distance, heart rate, power, elevation gain, effort and notes), and comments between you and your coach.
• Files you upload: .fit or .gpx activity files are stored as you upload them. These files can contain GPS location from your device.
• Connected services: if you choose to connect Garmin Connect or Strava, we receive your activities from them (the summary figures above, plus heart rate, power and speed over time) and store the access tokens needed to keep receiving them. We don't keep GPS location from these services, and we don't request health, sleep or wellness data.

How we use it

Only to run the service for you and your coach: showing your plan and completed training, matching synced activities to planned workouts, and calculating training load and fitness. We don't sell your data, use it for advertising, or share it with anyone other than the providers listed below.

Who can see it

• You.
• Your coach, for athletes they coach. Coaches can't see other coaches' athletes.
• Service providers that host the platform on our behalf: Supabase (database, sign-in and file storage) and Vercel (web hosting). They process data only to provide those services.

No one else receives your data. It is never sold, licensed or shared with third parties for their own use. Access is enforced in the database itself, not only in the app.

Garmin Connect and Strava

Connecting is optional and you can disconnect at any time under Settings → Connected apps. Disconnecting deletes the stored tokens and, for Garmin, removes our access on Garmin's side. You can also revoke access from your Garmin Connect or Strava account settings, and we stop receiving data as soon as you do. Activities already imported stay on your calendar until you or your coach delete them, or you ask us to remove them.

No AI processing

Your training data, including data from Garmin and Strava, is not processed by artificial-intelligence or machine-learning services, and neither it nor anything derived from it is used to train, evaluate or improve AI models. Training figures such as TSS, fitness and best efforts are calculated by the platform's own code.

Cookies and analytics

We use only the cookies needed to keep you signed in and to complete a Garmin connection securely. No advertising cookies.

We count page visits with Vercel Web Analytics, which uses no cookies and doesn't identify you. It records the page address (with any account or workout identifiers removed), the referring site, and your browser, device type and country.

Your data and choices

• Access: everything we hold about your training is shown to you in the app: your calendar, each workout, and your profile.
• Correct: you can edit a completed workout's details and your thresholds and units in the app, or ask us to correct anything else.
• Withdraw consent: disconnect Garmin or Strava under Settings → Connected apps, or revoke access from your Garmin Connect or Strava account, and we stop receiving data immediately.
• Export or delete: email blake@bullardtri.com and we'll send you a copy of your data or delete it within 30 days. Your coach can also remove your account, which permanently deletes your profile, workouts, comments, uploaded files and connections.

We keep your data while you have an account.

Security

All traffic is encrypted over HTTPS. Garmin and Strava tokens are stored server-side and are never sent to your browser.

Changes

If this policy changes, we'll update the date at the top and tell active users about significant changes.